Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/m7KtJlTD0XYb0qkoWg7yU7ZDPU8.asa
File:                     m7KtJlTD0XYb0qkoWg7yU7ZDPU8.asa (raw, json)
Hash identifier:          3rV2iQRzXo45L9Capru2ivV9n6Svuwy7ha4SJJSVcRU=
Subject key identifier:   9B:B2:AD:26:54:C3:D1:76:1B:D2:A9:28:5A:0E:F2:53:B6:43:3D:4F
Certificate issuer:       /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial:       019FD32CC47DAB7F6747852B3A8AA9DC27E6
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/m7KtJlTD0XYb0qkoWg7yU7ZDPU8.asa
Signing time:             Wed 05 Aug 2026 18:25:54 +0000
ASPA not before:          Wed 05 Aug 2026 18:25:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            209878
Providers:                AS: 34927
                          AS: 41051
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d3:2c:c4:7d:ab:7f:67:47:85:2b:3a:8a:a9:dc:27:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
        Validity
            Not Before: Aug  5 18:25:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bb2ad2654c3d1761bd2a9285a0ef253b6433d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:82:fb:67:25:65:64:17:a9:40:d1:75:79:
                    d0:76:ef:69:4d:2e:be:7b:01:44:af:21:89:3a:c6:
                    88:4d:87:1b:d6:f8:6d:f4:ef:8e:43:03:74:67:9a:
                    05:25:57:29:66:b1:71:c1:a3:5f:bd:72:96:11:37:
                    1a:f6:e4:4f:b8:00:bc:af:40:ff:a6:1b:a1:3c:c0:
                    8e:f7:b6:cf:6b:fa:7d:55:a0:96:86:d4:01:15:01:
                    eb:ec:fe:28:03:d1:d5:31:b4:0a:6f:9e:b8:1b:04:
                    91:b6:9f:27:af:0c:6f:e4:78:4b:5d:47:7e:c3:ce:
                    d2:4e:01:5e:75:2c:98:dd:9c:20:10:c6:cf:fa:27:
                    f7:7e:4d:32:2d:42:6f:66:ee:b1:02:2a:67:79:bd:
                    4f:63:18:dc:1a:9a:1c:11:10:cd:95:13:de:c4:11:
                    b8:60:ba:5a:22:41:ae:b5:76:bd:95:27:69:22:8f:
                    99:6d:68:ae:28:9d:6e:be:ed:2a:57:d3:11:bf:35:
                    63:7e:25:a0:5a:24:f7:bf:0f:50:2f:28:3c:2c:2f:
                    41:08:79:61:85:45:16:7c:26:86:2a:fc:1d:e7:9c:
                    01:ef:60:c2:9a:32:77:76:bc:59:ec:43:1d:01:02:
                    c4:eb:6b:ab:cf:da:0f:99:6e:bc:a4:5f:b5:f3:87:
                    0d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B2:AD:26:54:C3:D1:76:1B:D2:A9:28:5A:0E:F2:53:B6:43:3D:4F
            X509v3 Authority Key Identifier:
                keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/m7KtJlTD0XYb0qkoWg7yU7ZDPU8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209878

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:57:fa:f6:9a:b4:8d:e5:7f:52:ca:57:97:8b:34:89:00:
         1b:30:be:15:65:04:72:f5:2d:db:a3:d3:e4:2f:5b:59:fd:0f:
         bf:c2:40:b2:79:39:0c:17:6f:50:20:e6:a3:5b:c2:f7:73:88:
         58:64:64:70:56:89:4e:37:96:90:77:e3:d3:ad:01:49:a4:fe:
         64:36:6b:74:d8:95:7e:a6:e0:dc:1c:e5:11:d4:ae:2c:fd:ae:
         00:a7:e6:c9:26:d0:cf:14:2f:62:5f:9f:f7:f6:f7:90:ff:68:
         6f:a5:59:40:34:c5:ff:59:be:3e:03:9f:e1:72:e2:a1:47:1d:
         ab:94:27:12:90:1c:46:b8:86:56:01:45:3d:ae:41:37:35:88:
         4d:be:8f:12:b3:73:96:c0:eb:66:4b:fd:2a:7d:5f:98:6f:53:
         25:e6:5b:f6:b6:8c:73:53:9a:db:0f:aa:a1:a3:f0:24:39:48:
         5f:d4:cb:9c:a1:1b:f8:ea:16:05:1d:d4:27:15:18:1f:9f:c3:
         17:06:48:b6:c9:53:8e:f2:82:38:eb:11:de:69:a6:b9:95:55:
         9e:0d:4a:01:bb:9e:9d:30:a6:5d:a4:b3:22:79:22:06:70:b7:
         2d:77:d4:1c:a6:07:11:b0:b6:29:56:25:5f:43:6d:1e:9e:ef:
         cb:68:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:18 2026 by rpki-client